$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: c27m8vAAmimUocZ2/Tm/tDQh4pNIlnbW7LYHDsR8egk= Subject key identifier: 57:B9:D2:DC:4C:C7:CE:FA:11:68:95:D5:C7:55:6D:3D:FD:98:9C:7F Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 01FC Signing time: Thu 19 Jun 2025 02:02:09 +0000 Manifest this update: Thu 19 Jun 2025 02:02:08 +0000 Manifest next update: Thu 26 Jun 2025 02:02:08 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: WSCXx/3+37aQC29x3DKZXN+Mi2s9VxxTgtd8tpm412Q=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Jun 19 02:02:08 2025 GMT Not After : Jun 26 02:02:08 2025 GMT Subject: CN=68536fa0-a9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:f0:38:1f:66:c1:36:5e:b0:93:84:a5:fb: d7:7b:1a:5b:c6:20:8f:90:98:37:2e:fa:f7:90:d5: b2:03:af:df:96:b4:fc:2f:66:8a:93:b3:93:25:06: 7a:82:54:2e:a0:4a:52:68:97:b5:e3:6f:a9:7b:0b: 68:12:83:1c:b2:b8:b9:48:40:28:cd:f3:cc:86:bb: f4:d4:f0:9c:5c:d4:74:68:08:7f:19:b5:5e:89:52: 01:72:49:da:c8:84:34:29:d2:1e:e8:e2:ae:75:e0: 0f:04:f7:78:84:88:37:1c:a4:0b:f4:c1:b1:54:2b: 75:f5:bc:a6:de:7d:ec:a2:75:8b:b2:1b:7c:ab:2a: bb:0c:7e:e4:4e:6a:a6:ed:46:35:ff:2e:65:5d:89: cd:e7:f0:8b:43:65:d5:29:39:73:7d:91:7c:5a:4f: 25:62:85:44:30:76:0f:03:01:e0:9e:34:1e:31:d4: 9b:94:17:49:ad:01:81:1a:70:3a:a7:d7:2f:9f:64: 50:68:4c:c8:6a:c4:c9:52:6b:02:39:9a:5d:7f:64: 12:8a:98:07:2c:6a:bf:40:c5:30:34:b0:6f:77:8b: e4:a5:79:29:d4:c2:46:2a:4d:b2:e4:7b:a4:b4:27: 12:da:5d:03:a2:05:89:5c:e7:83:b3:51:a5:b4:5e: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:D2:DC:4C:C7:CE:FA:11:68:95:D5:C7:55:6D:3D:FD:98:9C:7F X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b9:3d:78:28:ac:0d:64:4b:d6:75:1c:8c:7a:f6:93:f8:e6: 1d:a8:8a:29:bb:63:7a:e7:44:17:c7:a5:81:b5:a5:d0:08:05: 30:43:20:a2:51:61:d2:b4:f7:4e:8a:05:cc:2c:39:e4:09:5a: 71:59:2f:7b:43:68:d6:06:77:bf:cd:a4:26:3f:67:15:6e:db: 51:ad:c2:d3:f7:57:b2:5a:01:b0:e5:a8:73:88:26:ce:9c:09: 48:2e:56:a7:5c:14:10:1e:c3:be:2a:e9:a7:cf:e2:14:79:82: 10:4f:18:57:5c:95:b7:e1:fb:92:5a:88:7c:3c:ce:f3:6c:c3: ac:24:53:86:0f:dd:fd:77:3f:b6:57:a7:08:7a:f3:03:f6:6f: 20:d2:24:74:06:aa:ac:72:df:cb:9c:bf:99:3e:97:30:c2:f0: 04:a4:d6:c6:26:98:49:c4:e5:94:37:d0:4c:b3:37:5b:e4:95: 63:88:1a:70:29:26:3f:ff:ba:17:11:43:03:e4:01:bb:bd:6d: 6a:4a:00:67:b1:c0:02:45:85:79:54:ba:e9:10:45:42:f7:18: 30:68:bc:7d:88:1c:8f:63:5e:7b:9e:bc:5c:f9:97:42:12:91: 13:ec:4e:46:d1:75:4c:eb:1e:b2:87:77:71:0d:7c:1f:77:4f: 90:8f:60:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwNjE5MDIwMjA4WhcNMjUwNjI2MDIwMjA4WjAYMRYwFAYD VQQDEw02ODUzNmZhMC1hOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIrwOB9mwTZesJOEpfvXexpbxiCPkJg3Lvr3kNWyA6/flrT8L2aKk7OTJQZ6 glQuoEpSaJe142+pewtoEoMcsri5SEAozfPMhrv01PCcXNR0aAh/GbVeiVIBckna yIQ0KdIe6OKudeAPBPd4hIg3HKQL9MGxVCt19bym3n3sonWLsht8qyq7DH7kTmqm 7UY1/y5lXYnN5/CLQ2XVKTlzfZF8Wk8lYoVEMHYPAwHgnjQeMdSblBdJrQGBGnA6 p9cvn2RQaEzIasTJUmsCOZpdf2QSipgHLGq/QMUwNLBvd4vkpXkp1MJGKk2y5Huk tCcS2l0DogWJXOeDs1GltF50fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe50txM x876EWiV1cdVbT39mJx/MB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEuT14KKwNZEvWdRyMevaT+OYdqIopu2N650QXx6WBtaXQCAUwQyCi UWHStPdOigXMLDnkCVpxWS97Q2jWBne/zaQmP2cVbttRrcLT91eyWgGw5ahziCbO nAlILlanXBQQHsO+Kumnz+IUeYIQTxhXXJW34fuSWoh8PM7zbMOsJFOGD939dz+2 V6cIevMD9m8g0iR0Bqqsct/LnL+ZPpcwwvAEpNbGJphJxOWUN9BMszdb5JVjiBpw KSY//7oXEUMD5AG7vW1qSgBnscACRYV5VLrpEEVC9xgwaLx9iByPY157nrxc+ZdC EpET7E5G0XVM6x6yh3dxDXwfd0+Qj2Dv -----END CERTIFICATE-----Generated at Fri Jun 20 02:13:15 2025 by rpki-client